Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa
File: f3A0879I3hDqFgOWKd9h_q3Q36k.roa (raw, json)
Hash identifier: FfdHVr4Gwlzh+Y5trym2mVmhwm2jHnKOyVYYNGor/fc=
Subject key identifier: 7F:70:34:F3:BF:48:DE:10:EA:16:03:96:29:DF:61:FE:AD:D0:DF:A9
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 020D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa
Signing time: Sat 01 Mar 2025 01:31:08 +0000
ROA not before: Sat 01 Mar 2025 01:31:08 +0000
ROA not after: Sun 15 Feb 2026 01:30:03 +0000
asID: 4713
IP address blocks: 123.224.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 1 01:31:08 2025 GMT
Not After : Feb 15 01:30:03 2026 GMT
Subject: CN=7F7034F3BF48DE10EA16039629DF61FEADD0DFA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:8f:1a:f0:c9:16:27:81:c2:fb:25:06:49:
3f:7b:f9:2b:f9:0b:96:0f:2b:9c:15:b9:cf:5d:f7:
1c:a1:be:b1:d1:bb:2d:d2:8d:df:c7:22:f8:42:d6:
4e:65:2b:00:bf:af:c3:8b:f1:c5:bf:37:43:8c:b2:
51:b0:47:0b:21:26:1a:b9:29:18:f0:78:4e:c9:c5:
cb:92:b6:c7:f4:b6:40:9e:75:5d:86:a6:22:2c:41:
0e:46:da:a7:36:aa:e0:dc:86:a4:b8:cf:a4:dc:ea:
a7:00:b6:06:71:32:8d:7c:d6:bb:c0:3b:f5:24:8d:
81:31:f0:4a:05:27:0e:d4:de:f4:f5:49:ae:d0:c8:
2b:73:13:fb:1a:7b:22:99:2a:65:fc:d2:1a:5b:c9:
4e:a4:b5:fc:dc:c4:69:9c:b4:a6:85:10:45:c2:7e:
85:a5:8b:aa:9d:8a:7f:07:7d:55:9f:2a:e0:6b:dc:
7d:aa:44:d9:e0:47:cb:4c:18:8d:92:1e:7c:87:ec:
23:af:52:19:22:6a:26:1b:ca:40:04:35:00:a5:5e:
15:94:43:ea:c8:7a:93:ff:76:18:aa:62:1b:9c:92:
d1:45:73:93:e1:66:7c:d8:9f:d1:a4:b5:82:4e:44:
dc:24:73:c9:d3:be:95:bb:4e:42:7b:0b:b8:56:ff:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:34:F3:BF:48:DE:10:EA:16:03:96:29:DF:61:FE:AD:D0:DF:A9
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/f3A0879I3hDqFgOWKd9h_q3Q36k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.224.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5d:87:64:bd:3e:36:43:cc:f5:c5:27:8f:93:e0:7b:81:16:e0:
a1:63:08:1f:a7:db:be:fd:a7:d4:66:ab:1e:ad:aa:a9:03:2f:
37:d3:d6:24:48:cd:ca:b0:61:e9:f1:98:85:66:42:7a:64:37:
be:36:68:b5:41:9c:11:88:58:7d:24:25:cb:b2:49:4f:f3:e8:
46:42:18:36:cb:6c:96:2c:72:b3:7e:83:ad:de:05:45:dc:c6:
b9:9f:08:2c:26:56:c5:3b:3c:1f:7d:19:79:b2:0d:6f:27:65:
c7:4f:ba:71:24:89:df:d0:bf:e3:3b:ce:1e:0c:dd:cd:e5:5e:
6c:e1:84:15:41:84:64:b4:5f:de:04:e0:03:96:ac:3a:d5:c1:
2e:ac:1d:bc:25:5e:0b:6c:08:4e:59:45:1b:0d:42:26:5e:4e:
54:54:09:f6:ca:ae:01:1b:04:a2:5e:7d:df:bf:62:47:ba:ef:
16:fc:15:c2:21:e2:a9:84:14:1b:97:ef:fe:74:1a:11:68:dd:
00:95:9a:58:8c:08:ab:06:aa:ca:c6:c2:6f:7c:a0:e4:b3:cc:
6d:60:28:20:78:98:96:06:65:26:ae:43:af:64:d9:65:31:f2:
51:72:fd:06:c6:6b:bf:32:3d:10:75:f4:fc:53:b2:4a:81:51:
8c:0d:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:05 2025 by rpki-client